easier to hack
[banana.git] / install.d / session.inc.php
1 <?php
2 /********************************************************************************
3 * include/session.inc.php : sessions for profile
4 * -------------------------
5 *
6 * This file is part of the banana distribution
7 * Copyright: See COPYING files that comes with this distribution
8 ********************************************************************************/
9
10 session_start();
11
12 // verify if a profile has been submitted
13 if (!isset($_SESSION['profile']) && isset($_POST['action'] && $_POST['action']!="OK")) {
14 $_SESSION['name'] = $_POST['profile_name'];
15 $_SESSION['mail'] = $_POST['profile_mail'];
16 $_SESSION['org'] = $_POST['profile_org'];
17 $_SESSION['sig'] = $_POST['profile_sig'];
18 $_SESSION['login'] = $_POST['profile_login'];
19 $_SESSION['passwd'] = $_POST['profile_passwd'];
20 $_SESSION['displaytype'] = $_POST['displaytype'];
21 $_SESSION['profile'] = true;
22 }
23
24 //sets sessions variables
25 if (!isset($_SESSION['profile'])) {
26 require("include/profile.inc.php");
27 $profile=getprofile();
28 require($profile['locale']);
29 require("header.inc.php");
30 require("profile_form.inc.php");
31 require("footer.inc.php");
32 exit;
33 }
34
35 // refresh-post protection
36 $sname = $_SERVER['SCRIPT_NAME'];
37 $array = explode('/',$sname);
38 $sname = array_pop($array);
39 unset($array);
40 switch ($sname) {
41 case "thread.php":
42 if (!isset($_SESSION['bananapostok']))
43 $_SESSION['bananapostok']=true;
44 break;
45 default:
46 $_SESSION['bananapostok']=true;
47 break;
48 }
49 ?>